Attachment 597365 Details for Bug 836241 – Backport of the fix for the issue.

[patch] Backport of the fix for the issue.

selinux-policy-dovecot.patch (text/plain), 2.41 KB, created by Tuomo Soini on 2012-07-10 15:01:11 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tuomo Soini

Created: 2012-07-10 15:01:11 UTC

Size: 2.41 KB

patch

obsolete

>diff -up serefpolicy-3.7.19/policy/modules/services/dovecot.te.dovecot serefpolicy-3.7.19/policy/modules/services/dovecot.te
>--- serefpolicy-3.7.19/policy/modules/services/dovecot.te.dovecot	2012-06-28 18:34:01.587019124 +0300
>+++ serefpolicy-3.7.19/policy/modules/services/dovecot.te	2012-06-28 18:34:02.167009668 +0300
>@@ -163,6 +163,7 @@ userdom_manage_user_home_content_pipes(d
> userdom_manage_user_home_content_sockets(dovecot_t)
> userdom_user_home_dir_filetrans_user_home_content(dovecot_t, { dir file lnk_file fifo_file sock_file })
> 
>+mta_manage_home_rw(dovecot_t)
> mta_manage_spool(dovecot_t)
> 
> optional_policy(`
>@@ -348,6 +349,7 @@ tunable_policy(`use_samba_home_dirs',`
> ')
> 
> optional_policy(`
>+	mta_manage_home_rw(dovecot_deliver_t)
> 	mta_manage_spool(dovecot_deliver_t)
> 	mta_read_queue(dovecot_deliver_t)
> ')
>diff -up serefpolicy-3.7.19/policy/modules/services/mta.if.dovecot serefpolicy-3.7.19/policy/modules/services/mta.if
>--- serefpolicy-3.7.19/policy/modules/services/mta.if.dovecot	2012-06-28 18:34:01.617012491 +0300
>+++ serefpolicy-3.7.19/policy/modules/services/mta.if	2012-06-28 18:34:51.432887831 +0300
>@@ -221,6 +221,54 @@ interface(`mta_read_home',`
>     read_files_pattern($1, mail_home_t, mail_home_t)
> ')
> 
>+####################################
>+## <summary>
>+##      ALlow domain to read mail content in the homedir
>+## </summary>
>+## <param name="domain">
>+##      <summary>
>+##      Domain allowed access.
>+##      </summary>
>+## </param>
>+#
>+interface(`mta_read_home_rw',`
>+	gen_require(`
>+		type mail_home_rw_t;
>+	')
>+
>+	userdom_search_user_home_dirs($1)
>+	read_files_pattern($1, mail_home_rw_t, mail_home_rw_t)
>+
>+	ifdef(`distro_redhat',`
>+		userdom_search_admin_dir($1)
>+	')
>+')
>+
>+####################################
>+## <summary>
>+##      Allow domain to manage mail content in the homedir
>+## </summary>
>+## <param name="domain">
>+##      <summary>
>+##      Domain allowed access.
>+##      </summary>
>+## </param>
>+#
>+interface(`mta_manage_home_rw',`
>+	gen_require(`
>+                type mail_home_rw_t;
>+        ')
>+
>+	userdom_search_user_home_dirs($1)
>+	manage_files_pattern($1, mail_home_rw_t, mail_home_rw_t)
>+	manage_dirs_pattern($1, mail_home_rw_t, mail_home_rw_t)
>+	read_lnk_files_pattern($1, mail_home_rw_t, mail_home_rw_t)
>+
>+	ifdef(`distro_redhat',`
>+		userdom_search_admin_dir($1)
>+        ')
>+')
>+
> ########################################
> ## <summary>
> ##	Make the specified domain usable for a mail server.

Actions: View | Diff

Attachments on bug 836241: 597365